The Product Security Specialist is essential for ensuring that security is embedded into every stage of the platform's development cycle. Given the complex nature of the Sportsbook platform and its importance to Kindred Group, having a dedicated Product Security Specialist who understands the platform's unique requirements is key to delivering tailored security solutions. This role allows for deeper engagement with the engineering teams, leading to faster security approvals, more secure components, and an overall improved security posture.

By focusing on KSP, the specialist can provide a more tailored and proactive approach to security, addressing potential risks early in the development cycle and ensuring that vulnerabilities are fixed promptly. The role also contributes to cross-platform security initiatives, ensuring consistent security practices across Kindred Group. With the implementation of the "paved road" approach, the Product Security Specialist will streamline security processes, enabling faster and more secure releases that align with Kindred Groups goals.

As a Product Security Specialist for our Sportsbook Platform (KSP) you will play a key role in keeping Kindred Group's Sportbook platform secure. Kindred Group security team operates out of Stockholm, while a majority of KSP engineering is located in Australia. You will be the main contact for KSP application security related queries for our engineers, ensuring that the product's security is continuously improved and aligned with both industry standards and Kindred's internal architecture. While your primary focus is on KSP, you will also collaborate cross-platform to provide security expertise when needed and participate in larger enterprise projects. You will collaborate closely with cross-functional engineering teams, to perform security testing and improve the overall security posture of the applications. If you are a developer with a strong security passion or a security professional with a developer background this role is perfect for you.

Key Responsibilities

• Security advisory: You will be the first line of contact for application security towards our Sportsbook engineering teams
• Technical Security Reviews: Perform technical security reviews of releases to ensure it meets our security requirements
• Threat modelling: Lead technical threat modelling exercises in collaboration with the engineering teams
• Security architecture:  Perform security architecture reviews
• Quality gates: Help out with implementing and enforcing new security controls and guidelines
• Product security improvement: Help maturing and drive our product security area forward
• Remediation support: Work with the relevant teams to help remediate security vulnerabilities and findings
• Security training: Perform application security training for our engineering teams

Requirements

• Technical Expertise:
  • Development experience in NodeJS or C#
  • Web application penetration testing experience
• Cybersecurity Focus:
  • Passionate about cybersecurity, particularly within the application security domain
  • A deep understanding of OWASP Top 10 vulnerabilities, exploitation and mitigation techniques
  • Experience using security tooling (SAST, DAST, SCA etc) to support manual testing
• Collaboration & Communication:
  • Strong people skills, able to collaborate effectively with engineering teams and across platforms
  • Excellent communication skills in English, both verbal and written
• Agile Environment:
  • Experience working in an Agile environment, with an understanding of Agile methodologies

Benefits

• We are in a fantastic new office near Barangaroo, close to Wynyard station.
• Our office has a sports hub, if you want to challenge a mate to a game of table tennis or darts.
• Fancy a good cup of coffee? We have an in-house barista to get you that perfect cup!
• Many social events to take part in (Melbourne Cup is just one of them).
• Great work life balance and flexibility.
• A continued commitment to employee development.
• Life insurance and income protection plans.
• Wellness benefits.